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Fractals, Graphs, and Fields 

Franklin Mendivil 


1. INTRODUCTION. One of the most amazing facets of mathematics is the expe- 
rience of starting with a problem in one area of mathematics and then following the 
trail through several other areas to the solution (or several versions of the solution). We 
illustrate this with a problem that starts out as a problem in rendering the attractor of 
an Iterated Function System (IFS), which leads to a solution that involves finding an 
Eulerian cycle in a certain graph and then to finding generators for the multiplicative 
group of a finite field. 

We start with an introduction to IFS fractals and the problem of generating an image 
of the attractor of an IFS. For a more complete introduction to the theory of Iterated 
Function Systems, we refer to reference (1]. 

2. ITERATED FUNCTION SYSTEMS. The basic idea behind Iterated Function 
System fractals is that we wish to formalize the concept of self-similarity. That is, 
given an image like Figure 1 , we wish to formalize our notion that the set is made up 
of three smaller copies of itself. 



Figure 1 . The Sierpiriski gasket. 


As a motivating example, consider the three maps from the unit square to itself 
defined by 


«-oU.y>=(^). «>,<*, w 2 (x,y) = (j, 


Clearly each of these maps contracts in all directions by a factor of two. Thus, the 
image of Figure 1 under is the smaller copy in the lower left corner. Similarly, 
the image under u)\ is the smaller copy in the lower right corner and under w 2 is the 
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smaller copy in the upper left comer. Thus, this collection of maps gives us some way 
to codify the fact that Figure 1 is made up of three smaller copies of itself. The set in 
Figure 1 is called the Sierpinski gasket. 

Formally, an Iterated Function System is a collection W = { w t : X X, i = 
0, 1, . . . , N — 1} of a finite number N of contractive self-maps of a complete met- 
ric space (X, d). For the purposes of generating fractal images we usually take X to 
be the unit square in M 2 ; that is, 

X = [0, l] 2 = {(w, v) : 0 < u, v < 1} 

and d is the usual Euclidean distance. However, the theory applies equally well to any 
complete metric space. 

Now a function w : X X (returning to the general setting) is a contraction with 
contraction factor 5(0 < s < 1) provided two things are true: (1) d(w(x ), w(y)) < 
sd(x , y) for all x and y in X and (2) s is the smallest number for which (1) holds. For 
an IFS {Wi}, we will let s t be the contraction factor of w t and define 5 = max* Si to be 
the contraction factor for the IFS. 

Appealing to our example of the Sierpinski gasket for motivation, we use the IFS 
W = {Wi} to define a set-map W on X that “combines” the action of all the individual 
maps Wi ; namely, we define 


W(B) = \Jw,(B) 


for each subset B of X. In order to investigate what happens when we iterate the 
mapping W, it is necessary to restrict the sets B. Let 

T~t(X) = {K C X : K is nonempty and compact}. 

We endow Ft(X) with the Hausdorff metric h defined by 


h(A, B) = max | sup inf d(a , b), sup inf d(a , b ) | . 

I aeA beB beB a ^ A J 

To get a feeling for the meaning of h(A, B), notice that if /z(A, B) < e, then every 
point of A is within € of some point of B and conversely. It is possible to prove that 
C H(X ), h ) is a complete metric space (see [1]). 

Let W = { Wi } be an IFS with contraction factor s. Then clearly W(B) belongs 
to H(X) whenever B does, so W : H(X) -> H(X). Furthermore, the map W is a 
contraction with contraction factor s (see [1]). Thus, by the Contraction Mapping The- 
orem, W has a unique fixed point A in H(X ); i.e., A satisfies the condition that 

A = W(A) = Ut« i (A). 


We call the fixed point the attractor of the IFS. For our motivating example, the 
Sierpinski gasket is the attractor of the three-map IFS given earlier. 

How do we generate an image of A? Well, since W is contractive, we can start 
with any initial member A 0 of H(X) and form the sequence of sets given recursively 
by A n+ 1 = W(A n ): this sequence converges to the attractor A. This is the so-called 
deterministic method of rendering an attractor and is illustrated in Figure 2, where we 
start with an initial image that is the attractor of another IFS. 
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Figure 2. Deterministic iteration for the Sierpinski gasket. 


Another method of rendering an image of the attractor of the A-map IFS W = {Wi} 
is the chaos game algorithm , which has the following steps: 

1. Choose some point jc 0 of X. 

2. Choose a map w t uniformly at random from the maps in the IFS W (that 
is, choose randomly from the set {w i, w 2 , . . . , u^}, with each choice equally 
likely). 

3. Let x n+ \ = u)i(x n ) and plot the point x n+ \. 

4. Return to step 2 and repeat the process, with x n+ \ replacing x n \ iterate this pro- 
cedure until “sufficiently” many points are generated. 

Usually we let the algorithm run for some number of iterations before we start 
plotting points. It is a remarkable fact that an image of the set A “coalesces” from the 
set of plotted points as the iteration progresses. To see why this might be so, we reflect 
on what happens as we iterate this process. 

Going back to our example IFS for the Sierpinski gasket, suppose that we start with 
the two points x G = (0, 0) and y 0 = (1, 1), and that we choose map wq in the first 
iteration of the chaos game. Then we have x\ = wo(x 0 ) = (0, 0) and y\ = rc 0 (yo) = 
(1/2, 1 /2), so the distance between x 0 and y 0 has decreased by a factor of two. We see 
that, with each additional map that we apply to both x n and y n , distance is decreased by 
a factor of two. After a certain number of iterations, the two points x n and y n will be so 
close that we won’t be able to distinguish them, at least not at the finite resolution of a 
computer screen. For example, if the screen has resolution 1024 x 1024, then after at 
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most eleven iterations, the two points that started out at opposite comers of the screen 
will have been contracted down to within one pixel, with the consequence that both 
will be plotted as a single pixel. 

What does this have to do with the chaos game? Well, suppose that in the determin- 
istic iteration of the set function W we start with the set A 0 = { x }, which represents a 
single pixel on the computer screen. Then 

Ai = [w 0 (x), wi(x), w 2 (x)} 

A 2 = {wo(w 0 (x)), tu 0 (tUi(*)), w 0 (w 2 (x)), Wi(w 0 (x)), 

Wi(Wi(x)), Wi(w 2 (x)), U) 2 {w o(x)), W 2 (Wi(x)), w 2 (w 2 (x))}, 

and so forth. We find that 

A n = {w h ow i2 o---o w in (x) : ij € {0, 1, 2}}. 

Thus, the chaos game is finding one such sequence of compositions, whereas the 
deterministic iteration generates all possible sequences. Now, by what we mentioned 
earlier in regard to the Sierpinski gasket on our 1024 x 1024 resolution screen, we 
cannot distinguish between the two points 

w h ow i2 o---o w in (*), w h O w i2 O • • • o W in (y) 

once n reaches eleven, no matter what the points x and y are. (Notice that the two 
sequences of maps that we applied to x and y are the same; this is important.) As a 
result, in our exhaustive generation of such possible sequences, all we need to do is 
generate those of length at most eleven, since parts obtained from longer words in the 
alphabet W are visually indistinguishable. 

Upon further reflection, we see that this gives a convenient way of labeling the 
points of the set A (at least on our limited resolution computer monitor) by using finite 
sequences of maps chosen from the IFS W. To each such sequence of compositions of 
maps, there corresponds one point of the attractor A. However, it is possible that two 
such sequences of compositions of maps lead to the same point. 

So where does this leave us? We see that in order to render an image of the 
Sierpinski gasket we need generate only the set of all possible sequences of length 
eleven from the set {0, 1,2}, apply the appropriate compositions to ANY starting 
point, and plot the result. There are exactly 3 11 = 177,147 such sequences, meaning 
that there should be this many points on the approximate Sierpinski gasket on our 
1024 x 1024 resolution computer screen (the screen has 1,048,576 pixels, a number 
considerably larger than 177,147). 

Now we have the facts necessary to give us an inkling of why the chaos game works. 
When we generate the random sequence of maps to compose, with probability one we 
will eventually generate every substring of length eleven as a part of the sequence. 
Suppose, for instance, that part of a randomly generated string is 

. . . 00121221 10021 | 01 10102010221210100 . . . 

and we have gotten as far as the | mark. Then the fact that the first three (displayed) 
maps are iu 0 , w 0 , and w\ makes no difference, since regardless of what point we start 
with, after eleven iterations we have lost any means of discovering where we started. 
Thus, only the most recent eleven iterations can have any influence on which pixel is 
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plotted. Since we generate all possible substrings of length eleven from {0, 1, 2}, we 
will eventually plot every point on the attractor. 

This leads us to wonder if it is possible to do this more efficiently. Surely the chaos 
game algorithm will plot the same point multiple times. If there were some way of 
ensuring that we generate each point (or each sequence) only once, then this could 
save some effort, not to mention computation time. 

3. DE BRUIJN SEQUENCES. We finished the previous section expressing the de- 
sire to find a single sequence from {0, 1, 2} that contains each sequence from {0, 1, 2} 
of a given length / as a subsequence exactly once. Such sequences do indeed exist; for 
example, for length l — 2 we have the sequence 

0011221020 

from which we get all the subsequences 

00 , 01 , 11 , 12 , 22 , 21 , 10 , 02 , 20 

by taking a “window” of length two and sliding it along the original sequence. If we 
wrap around on our sequence (say, by labeling evenly spaced points on a circle), we 
can shorten the “universal” sequence for / = 2 to 

001122102 . 

Such wrap-around sequences are called de Bruijn sequences (see [3], [4], and [6]). 
Formally, a de Bruijn sequence corresponding to positive integers Z and N is a circular 
sequence of length N l such that every string of length / on an alphabet {a\, a 2 , . . . , a N ) 
occurs exactly once as a contiguous substring. The questions are: Do such sequences 
exist for an arbitrary “window” length and an arbitrary number of symbols? If such 
sequences exist, how do we construct them?. The remarkable fact is that we can find a 
simple algorithm to construct such sequences, thereby answering both questions at the 
same time! In this section we construct de Bruijn sequences using a tiny bit of graph 
theory, and in the next section we show how we can also exploit some of the theory of 
finite fields to construct de Bruijn sequences. 

We illustrate the general algorithm by seeing how it works for the particular ex- 
ample we have been discussing. Consider the directed graph with three vertices la- 
beled 0, 1, and 2. Draw directed edges in both directions from each vertex to each 
other vertex, including a single directed edge from a vertex to itself (see Figure 3). 
Label each edge by the name of the vertex that it leads to. This graph is an example of 
a de Bruijn graph (the definition of the de Bruijn graph for the general situation will 
be given shortly). 

We wish to find an Eulerian cycle in this graph, by which we mean a path that 
traces out each edge exactly once and finishes where it starts. It is easy to see that in 
a directed graph such a cycle exists if and only if the number of edges leading out of 
each vertex (its out-degree) is the same as the number of edges leading into that vertex 
(its in-degree). This is clearly the case with our graph. 

The Eulerian cycle that generates the sequence in our illustrative example is ob- 
tained by starting at vertex 0, then making the following sequence of moves (where 
we list the name of the edge that we traverse): 

011221020 . 

Notice that this is our de Bruijn sequence. 
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Figure 3. Directed graph for a de Bruijn sequence. 


Suppose that we have the symbol set {0, 1, . . . , A — 1} and we wish to find a single 
sequence with the feature that, as we slide a “window” of length / along this sequence 
we will obtain all possible sequences of length /, each exactly once, constructive from 
our symbol set. Clearly our long sequence must have length at least N l elements (since 
we need at least that many different positions of the sliding window). It is an amazing 
fact that it is possible to find (many) sequences of exactly this length that will work. 

The graph theoretic construction will work in this more general context as well. As 
our vertex set, we use the set of all words (sequences) of length / — 1 from the alphabet 
{0, 1, . . . , A — 1}. We construct the edges of our directed graph by connecting vertex 
d\d 2 . . . to vertex d 2 d 3 . . . di-\b with a directed edge labeled b , for each choice 

of b. Again, the in-degree is equal to the out-degree for each vertex, so Eulerian cycles 
exist in this directed graph. Each such cycle corresponds to a de Bruijn sequence. 

It is simple to implement a computer algorithm for finding an Eulerian cycle in a 
de Bruijn graph. First, define an integer array vertex [] . This array is indexed by all 
the possible vertices in the de Bruijn graph. Since there are A /_1 such vertices, the 
array vertex [] contains this many memory locations. In order to index the array, 
we interpret vertex d\d 2 . . . a n -\ as a base A number (so vertex [000 ... 0] is the 
first memory location in the array). We initialize the array so that each entry has value 
A — 1 . Then we choose one vertex (say the vertex 000 ... 0) as the starting point of 
the cycle, and whenever we are in a vertex j, we leave this vertex along the edge 
vertex [ j ] and decrease the value vertex [ j ] by one. That is, the array vertex [ j ] 
keeps track of which outgoing edges are still unused whenever we come to vertex j . 
We just use the outgoing edges in the order A— 1, A — 2, A — 3,. ..,1,0 to make 
the bookkeeping simple. 

If the algorithm returns to a vertex with no remaining outgoing edges, check to see if 
it has generated the entire sequence (whose length is known). If not, find some vertex 
whose outgoing edges have not been exhausted and, by the same process, generate 
a new sequence to be “inserted” into the original sequence at the appropriate point. 
Continue this procedure until all edges have been accounted for. In the end, we will 
have generated the entire de Bruijn sequence and can simply print it out. 

As an example, in the de Bruijn graph of Figure 3, if we start at vertex 0 we take 
the outgoing edge 2 to come to vertex 2. Then the procedure would take the sequence 
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of edges 21201 100 to produce the de Bruijn sequence 

221201100. 

In this simple example, the algorithm never needed to “insert” a new sequence into the 
original sequence. 

Suppose that we do this for the symbol set {0, 1, 2} for length l = 11 and obtain our 
“mother” string of length 3 11 = 177, 147. In order to render an image of the Sierpinski 
gasket we use this sequence instead of the randomly generated sequence of 0s, Is, and 
2s. In this way, we are guaranteed to plot each point of the attractor exactly once, 
modulo the resolution of our 1024 x 1024 screen. 

Notice that we can think of the chaos game as a random walk on the appropriate 
de Bruijn graph. In order for the chaos game to generate all points of the attractor (to 
some specified resolution), we need to wait until this random walk has traversed every 
edge in the graph. 

A problem with this method is that we need to store the entire sequence in order to 
use it. Both the algorithm that generates the sequence and the modified “chaos game” 
require the entire sequence, so both algorithms require huge amounts of computer 
memory. It would be very nice if there were a way to generate the sequence as it is 
needed, rather than all at once. 

4. CONSTRUCTION VIA FINITE FIELDS. We begin once more with an ex- 
ample to illustrate the main idea. Suppose again that we wish to find a de Bruijn 
sequence for the symbol set {0, 1, 2} and a window of length l = 2. Consider the poly- 
nomial q(x) = x 2 + x + 2 as a polynomial over Z 3 (the integers modulo 3). Starting 
with the polynomial h(x) = x we recursively define a sequence of polynomials h 0 (x), 
h i(x), h 2 (x), . . ., (over Z 3 ) as follows: h 0 (x) = h(x) and h n +\(x) is obtained from 
h n (x) by multiplying the latter by x and reducing modulo q(x) whenever necessary 
(that is, by exploiting the relation q(x) = 0 or x 2 = 2x + 1 to eliminate powers of 
x higher than the first power). Doing this, we generate the sequence of polynomials 
(over Z 3 ) 


x , 2x + 1 , 2x + 2, 2, 2x , x 4- 2, x 4- 1 , 1 , 

at which point the iteration repeats itself (for example, 

x(2x 4~ 1) — 2x ^ 4- x — 2(2x 4- 1) x — Sx 4~ 2 — 2x 4~ 2 

in Z 3 [x]/ {q(x))). Now choose a degree, take the coefficient of the term of this degree 
in each of these polynomials (say the coefficient of x in each), and write them down in 
sequence: 


12202110 . 

Notice that we almost have a de Bruijn sequence corresponding to the given data. The 
only sequence of length two we are missing is 00. If we start out our sequence with a 
leading zero, we get the de Bruijn sequence 

012202110 . 

If we had chosen to write down the constant coefficients (with the leading 0) we would 
obtain the de Bruijn sequence 
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001220211 . 


How does this work? To explain it, we briefly review the basics of the theory of 
finite fields (the book [2] has a nice discussion of the necessary background). Recall 
that for any prime p the ring of integers modulo p , signified by Z p , is a field (since it 
has no zero divisors). Let 


q(x) = x l — ai^ix 1 1 — 2 — ... — a\X — do 

be a polynomial of degree l in Z p [x] that is irreducible over Z p , and consider the 
quotient ring 


Z p [x]/(q(x)) 

(that is, the quotient ring of Z p [v] modulo the ideal generated by the polynomial q (x)). 
We know, since q(x) is irreducible, that Z p [x]/(q(x)) is a field with exactly p l ele- 
ments; it is called the Gdlois field of order p l and often denoted by GF(p l ). Addition 
in this field amounts to addition in Z p [x]. It is only in multiplying that we need reduce 
modulo q(x). We do this by appealing to the relation 

X l = di—\X l ^ + di—2X^ ~b • • • T" d\ X + dQ. 

Clearly we can view GF(p l ) as a vector space of dimension / over Z p (since Z p [x] 
is clearly a vector space over Z p and this field is a quotient vector space thereof). 
Furthermore, the field GF(p l ) is the unique field with p l elements and contains all 
roots of q(x) as a polynomial in Z p [x]. 

Because GF(p l ) is a field, its set of nonzero elements, the set GF(p 1 )*, forms an 
Abelian group under multiplication-in fact, a cyclic group. Suppose that we choose 
our polynomial q(x) in such a way that one of its roots a in GF(p l ) is a generator 
of this cyclic group: GF(p l y = { a , a 2 , . . . , a pl ~ 1 } (such a root is called a primitive 
root). 

This is what we did in our example, where p = 3, / = 2, and q(x) = x 2 + * + 2. 
Since all elements of GF( 3 2 ) can be viewed as polynomials of degree at most 1, we 
choose the polynomial so that a = x is a primitive root (notice that our notation does 
not distinguish between x in Z p [x] and x + (q(x)) in Z p [x]/ (q(x))). We see that the 
powers of x do indeed generate GF(3 2 )*, for there are eight elements in GF( 3 2 )* and 
we generated eight different polynomials by repeatedly multiplying by x. 

What did we do when we chose one of the coefficients to write down? Well, GF( 3 2 ) 
is a vector space over Z 3 , so taking either coefficient can be thought of as computing 
the value of a linear functional : GF( 3 2 ) — Z 3 . Thus we enumerated all the ele- 
ments of GF(3 2 Y and applied the linear functional <p t0 ea °h t0 obtain our desired 
sequence. Notice that, if we had selected the linear functional that simply adds the two 
coefficients, we would have arrived at 

010122021, 

from which we obtain a de Bruijn sequence by inserting a 0 at the appropriate place. 

It seems that all we are doing is generating all the elements of GF(p l ) in a particular 
order. How do we know that we will get a de Bruijn sequence? To answer this question, 
suppose that 


q(x) = x l — di-\X l 1 — di_ 2 x l 2 — ... — d\x — do 
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is irreducible over Z p and that a = x is a primitive root of q(x ) in GF(p l ) = 
ZpM/ (<?(•*))• Let 0 : GF(p l ) — > Z p be any nonzero linear functional (linear when 
we view GF(p l ) as a vector space over Z p ). Writing GF(p 1 )* = { a , a 1 , . . . , a p -1 } 
and applying 0 to its elements in this prescribed order, we generate the sequence 

(p(a), (p(a 2 ), (p(a 3 ), . . . , <p(a p '~ l ). 

Assume that there is a repeat in the window of length / at some point. Then there 
exist i and j satisfying 1 < i < j < P l - 1 such that 

<p(oc l ) = 0(a y ), 

<fi(a l+l ) = 0(a? 7+1 ), 

<p(a l+l ~ l ) = 0(q' 7+/_1 ). 

However, this is the same thing as saying that the / vectors a j+k — a l+k for k = 0, 
. . . , Z — 1 are in the kernel of the linear functional 0. Since GF(p l ) is /-dimensional, 
these vectors must be linearly dependent; i.e., there are constants a k in Z p9 not all 0, 
for which 


i-\ 

Y^a k (a j+k - a i+k ) = 0 

k=0 

or, equivalently, 


/-j 

a 1 (1 — a j ~ l ) ^ a k a k = 0. 

k= 0 

Now a 1 ^ 0 and the only way to have 1 = a j ~ l is to take i = j , so it must be the 
case that ^a k ot k = 0. However, this cannot happen, since then g(a) = 0 for a poly- 
nomial g(x) of degree Z — 1, contradicting the assumption that a is algebraic of degree 
Z over Z p . Thus, no repeated windows are possible. 

Notice that this argument also works if there is some u wrap around” in the subse- 
quence. That is, it makes no difference to the argument if j + Z - 1 > p l — 1 (since 
the powers of a also “wrap around”). 

The reason we need to insert a zero into the sequence 

4>{a), <p(a 2 ), cp(a 3 ), <p(a p ‘~ ‘) 

in order to produce a de Bruijn sequence is that we will not generate 0 in GF(p l ) by 
this process. To remedy the situation, all we need to do is to find some place where 
there are Z — 1 zeros and insert an extra zero. By choosing 0 to be the coefficient of 
x /_1 , we can simply prefix the zero, since in this instance the sequence starts with Z — 1 
zeros. 

What we are doing is using the multiplicative structure of GF(p l ) to generate the 
p l — 1 different elements of GF(p 1 )* in a specific order and then using the linear 
functional 0 to translate this information into a symbol from Z p . 

Fast algorithm to compute de Bruijn sequences. It is easy to describe a fast algo- 
rithm to compute a de Bruijn sequence for a prime number of symbols (see chapter 2 
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of [ 4 ] for more details). For the irreducible polynomial q(x) in the foregoing discus- 
sion, we use the recursion satisfying the initial conditions y/_i = 1 and y t — 0 for 
/ = 0, 1, — 2 with the recursion rule 


y n +i — ai-\y n+ i-\ + ai_ 2 y n +i -2 + * • • + ^lTn+i + a o Tn 

for n = 0, 1, 2, We again need to insert a zero in the appropriate place. However, 

because of the initial conditions, we know that we can simply place the extra zero at 
the beginning. 


Composite n. Now clearly this method of using finite fields is very nice, as it allows 
us to generate the de Bruijn sequence on the fly (if we know the polynomial q(x)). 
However, what if we wish to generate a de Bruijn sequence with a window length of / 
for the set {0, 1, . . . , n — 1}, where n is not a prime? What then? The problem is that 
in general 7L n is not a field and there is no associated field GF(n l ). 

Case 1. n = p k for a prime p and k > 1 . 

In this situation we exploit the fact that GF(p k ) is a subfield of GF(p kl ), making 
GF(p kl ) a vector space over GF(p k ). What we do is to use a linear functional 0 : 
GF(p kl ) -> GF(p k ). Our set of “symbols” will be from GF(p k ), which we can then 
interpret as the set {0, 1,2,...,/?*}. 

An example will help to make this clear. Suppose that n — 4 and l = 2. In general, 
finding a primitive polynomial of degree / over Z p is difficult. In our case, since both 
/ and p are small, we simply used MAPLE to factor the polynomial z 2 — z over Z 2 
and picked q(z) = z 4 + z + 1 as one of the factors of degree 4. Since q(z) does not 
divide z m — z for any m smaller than 16, we know that it must be primitive (for this 
and other results related to finding irreducible or primitive polynomials, see [ 4 ]). We 
find that the polynomial q(x) = x 4 + x + 1 is irreducible over Z 2 with a = x being 
a primitive root in Z 2 [x]/ {q(x)). We proceed as we did before, computing the powers 
of a in order to generate GF{ 2 4 )*. 

Now we need to come up with a linear functional 0 : GF( 2 4 ) -> GF( 2 2 ). To do this, 
notice that GF( 2 2 ) is the subset {0, a 5 , a 10 , a 15 = 1} of GF{ 2 4 ), where a 5 + 1 = a 10 . 
We know that all these elements of GF( 2 4 ) are in GF{ 2 2 ) because they are all roots 
of the polynomial z 2 + z + 1, which generates GF( 2 2 ) over Z 2 . If we can represent a 
given in GF( 2 4 ) in some basis over GF( 2 2 ), then we can simply take a component of 
this representation as our linear functional 0 (as we did earlier by taking the coefficient 
of x /_1 ). 

Given an element of GF( 2 4 ), how do we find its representation? The obvious 
basis of GF( 2 4 ) over GF( 2 2 ) is the set {a, 1}. Next we observe that 

1 = 0 • a + 1 • 1, 
x = 1 • a + 0 • 1, 
x 2 = 1 • a + a 5 • 1, 
x 3 = a 10 • a + a 5 • 1, 

so an arbitrary element = a + bx + cx 2 + dx 3 of GF( 2 4 ) (using our representation 
of GF( 2 4 ) = Z 2 [jt ]/(q(x))) can be expressed as — A • a + B • 1, with 
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( a \ 

(A W° i 1 a 10 \ b 

\ B ) ~\ l 0 a 5 a 5 ) c ’ 

\d ) 

all arithmetic being carried out in GF( 2 4 ). Thus we can take our linear functional 0 to 
be represented by the row- vector 


(0 1 1 of 10 ) . 

Putting all this together, the sequence of powers of a = x is: 

X, x 2 , x 3 , X + 1, x 2 + X, x 3 + X 2 , x 3 + X + 1, X 2 + 1, 
x 3 + x,x 2 + X + l,X 3 + X 2 + X, x 3 + X 2 + X + 1, x 3 + X 2 + 1, X 3 + 1, 1. 

Applying 0 to this sequence we get the sequence (in GF( 2 2 )) 

1, 1, o' 10 , 1, 0, a 5 , a 5 , 1, a 5 , 0, a 10 , a 10 , a 5 , a 10 , 0. 

Finally, we can use any mapping GF{2 2 ) -> {0, 1, 2, 3} and judiciously insert a 0 to 
retrieve the de Bruijn sequence 


1131022120332300 

(here we attached the extra 0 at the end). 

We mention in passing that in [ 4 ] there is a discussion of the representation of all 
linear functionals 0 : GF(p kl ) -* GF(p k ) using a “trace” 

Tr(p) = p + +fi q2 -\ 1- , 


where q = p k . 

Case 2. n is not a power of a prime. 

What happens if n is not a prime power? Suppose, for instance, that n = 6 = 2-3 
and / = 2. We take a de Bruijn sequence for n = 2 and / = 2, say 

0110 , 

and a de Bruijn sequence for « = 3 and / = 2, say 

001220211 , 

then repeat the first one nine times and the second four times to get 

011001100110011001100110011001100110 

001220211001220211001220211001220211. 

Taking in order one symbol from the top line and the one below it from the bottom, 
and using the identifications 

00 i-> 0, 01 i-> 1, 02 i-> 2, 10 i-> 3, 11 i— ► 4, 12 i-> 5, 
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we obtain 


034223511331253214301550244004520541. 


Thus by “mixing” two de Bruijn sequences for 2 and 3 we get one for 6. 
In the general case suppose that the prime factorization of n is 


m i mi mb 

n = P\ 'Pi '"Pk 


with pi < p 2 < P 3 < • • • < Pk and that we wish to obtain a sequence with a window 
of length /. By the Chinese Remainder Theorem, Z n & Z/i x Z x • • • x Z m k . 

Let 0 be an isomorphism from the indicated product group to Z n . Our construction 
using GF(p ( ™ k)l ) as a vector space over GF(p ™ k ) yields k de Bruijn sequences { 1 ^} for 

i — 1, . . . , k and j = 1, . . . , p ™ il , with in Z p .w/ . We obtain the desired de Bruijn 

sequence (in Z n ) by applying 0 to the combination of these sequences. Specifically, 
for r = 1, . . . , n l the rth term of the sequence is 

W r = 0 ( V mi , . . . , V m k,l' 

\ r mod r mod P k / 

We claim that this sequence has the desired property. Clearly each term of the se- 
quence belongs to Z n . Suppose that there were a repeated block of length /. Then for 
some a and b with a < b we would have 


W a = W b , 

Wa+ 1 = Wfc+i, 


MW/-1 = ^+z-i- 

Since 0 is an isomorphism, this would imply that 

V mi — V mi , 

a mod /?• 6 mod /?• ‘ 

v’ m = v‘ j m , , 

a+1 mod p t b + 1 mod p. 

V mi — ■ mi • 

a+l—l mod p i b+l—1 mod p i 

for i = 1, 2, . . . , k. This cannot happen for all i simultaneously by the de Bruijn prop- 
erty of the individual sequences {t^-} and the fact that the primes p t are distinct. Again 
this argument also works if there is some “wrap around” in the subsequences. 

Basically we “mix” together de Bruijn sequences for relatively prime periods and 
relatively prime symbol spaces by using the Chinese Remainder Theorem essentially 
twice-once to get all the symbols in the symbol space and again to prove that the 
sequence we obtain has no repeats. 

5. BACK TO FRACTALS. How efficient is it to use the finite field method for con- 
structing de Bruijn sequences in rendering a fractal? The main difficulty is in find- 
ing the primitive polynomials (those irreducible polynomials whose roots generate 
GF(p 1 )*) and, in the case n = p k , a representation for the linear functional 0. If we 
are willing to hard-code this information into our program, then the algorithm is very 
efficient. 
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Oftentimes it is merely necessary to get a reasonable image of the attractor of an 
IFS. In these cases, running the chaos game with a very low iteration count (or even a 
short de Bruijn sequence) is sufficient. However, there are cases where it is essential 
that we guarantee that every point of the attractor (at the specified resolution) is plotted 
(for example, in situations where we wish to analyze the geometrical structure of the 
attractor in some automatic way). Under such circumstances the de Bruijn sequence 
approach is much more efficient than the chaos game since we know that the former 
will generate all the relevant points. With the chaos game we could run a very high 
iteration count, but we would still have only probabilistic bounds. For example, we 
expect that it will take roughly 2.24 million iterations of the chaos game in order to 
get all possible length eleven sequences from the set {0, 1, 2}. 

Finally, we wish to mention that there is a wealth of literature on using de Bruijn 
sequences in many application areas. If the reader is interested in exploring this topic, 
a good way to start would be to go to google (or one’s favorite search engine) and do 
a keyword search. The book [ 4 ] has an extensive bibliography and contains a chapter 
on linear recurrence sequences in GF(p l ). The book [ 5 ] by the same authors is more 
of a textbook and provides a very nice introduction to the theory of finite fields. 
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